DisclosureLens
GLOBALUnknownRansomwareKarakurtLow

Medicalodges, Inc

bd_dd76c1b3e58e924e · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Apr 13, 2023

To disclose

Affected

Not disclosed

Linked

2 filings

Confidence

60%
Full breach record for Medicalodges, Inc

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

Kansas healthcare company hit by ransomware. Medicalodges, Inc.: A Kansas-based healthcare company was the victim of a cyberattack. The Karakurt extortion group claimed responsibility for the attack and claims to have access to 170 GB of Medicalodges' data, including Social Security numbers and medical diagnoses. The group threatens to release at least 158 GB of this data on April 17. Cybersecurity experts have been engaged to assist with Medicalodges' investigation and response. The Karakurt group is known for not maintaining victim information confidentiality after ransom payment. Linked ransomware group: karakurt.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Apr 13, 2023

Press report

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

Compliance clock

Not assessable

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2022-12-11

karakurt

According to ransomware.live, Karakurt is a pure data-extortion group (no encryption) assessed with high confidence to be the extortion arm of the Conti ransomware group, active from 2021, that steals data and threatens to auction or publish it unless ransoms ranging from $25,000 to $13 million are paid.

74 victims claimed globally74 tracked hereFull profile →